[U-Boot] [PATCH v2 0/5] arm: imx6: Enable Secure Boot (HAB) with SPL Builds

[Stefano Babic]

On 06/11/2016 16:37, Sven Ebenfeld wrote:
> When trying to build U-Boot for Wandboard with Secure Boot, the build fails
> because it tries to compile the dekblob commands within the SPL. The dekblob
> command depends on the CAAM driver, which is also not required in the SPL. 
> Additionally, this blows the SPL up to a size beyond the limit of 69KiB in
> i.MX6DL OCRAM. Therefore I deactivate building the commands during SPL build.
> 
> Next I implemented HAB verification before jumping to the loaded image. To
> create images that are HAB compatible, I updated the mkimage tool and added some
> documentation. At last I try to make the signing process easier as the output of
> the mkimage tool will be preserverd within the build dir. The output contains
> information required to correctly sign HAB images.
> 
> Cc: sbabic at denx.de
> 
> v2 Changes:
>  - Repair build failures in many SPLs due to incorrect variable assignment.
>  - Repair mx31 and mx27 builds without imx-common libs (nothing is built there
>    for them.
> 
> Sven Ebenfeld (5):
>   arm: imx: remove bmode , hdmidet and dek commands from SPL
>   arm: imx: add HAB authentication of image to SPL boot
>   tools: mkimage: add firmware-ivt image type for HAB verification
>   doc: imx6: add section for secure boot with SPL
>   Makefile: preserve output for images that can contain HAB Blocks
> 
>  .gitignore                            |   2 +-
>  Makefile                              |  15 +++-
>  arch/arm/Makefile                     |   2 +-
>  arch/arm/imx-common/Makefile          |   6 ++
>  arch/arm/imx-common/hab.c             | 129 ++++++++++++++++++----------------
>  arch/arm/imx-common/spl.c             |  25 +++++++
>  arch/arm/imx-common/spl_sd.cfg        |  10 +++
>  arch/arm/include/asm/imx-common/hab.h |   2 +
>  common/image.c                        |   6 ++
>  doc/README.imx6                       |  49 +++++++++++++
>  include/configs/mx6_common.h          |   3 +
>  include/image.h                       |   1 +
>  scripts/Makefile.lib                  |   3 +-
>  scripts/Makefile.spl                  |   4 +-
>  tools/default_image.c                 |  10 ++-
>  tools/mkimage.c                       |  32 +++++++++
>  16 files changed, 232 insertions(+), 67 deletions(-)
> 

Applied to u-boot-imx, -master, thanks !

Best regards,
Stefano Babic

-- 
=====================================================================
DENX Software Engineering GmbH,      Managing Director: Wolfgang Denk
HRB 165235 Munich, Office: Kirchenstr.5, D-82194 Groebenzell, Germany
Phone: +49-8142-66989-53 Fax: +49-8142-66989-80 Email: sbabic at denx.de
=====================================================================